I'd like to provide some background before I pose my question so please, bear with me.
I have come across Microsoft's Security Compliance Manager. It's rather new to me and as I understand so far, one can download EC (enterprise) or SSLF (specialized security, limited function) security "baseline" GPOs for implementation in Active Directory. The baselines are for XP, Win 7, Win 2k3, and 2k8.
GPOAccelerator can deploy or implement these baseline GPOs for a Domain or Locally.
I believe SCCM's DCM can compare GPOs that one has created against GPOs from the SCM?
And now for my question: Is there a tool to check GPOs like MBSA? Bonus: Is there any tool that will give a security rating for "missing" GPOs or "weak" GPOs?